Login script doesn't run when user logs into computer in other dom

[PanTzeR]

Hi,

We have 2 domains in 2 different forests with trust enabled. It has been set
up long time ago like it is, but I just done some testing and found that when
I login under a user setup in 1 domain to the computer belonging to the 2
domain, login script does not run.

It runs fine if I am using a user and a computer of the same domain. When it
does not run, I can navigate to the DC and run it manually without issues.

In event log on the computer I can see following warning and believe it
might be related to the problem.

I would like to be able to run login scripts in described situations, so if
anyone can please point me to where the problem lies it would be appreciated.

---------------------------------------------------------------
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1109
Date: 4/04/2008
Time: 4:07:18 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER160
Description:
CN=test123,OU=Technical Support,OU=CITY,DC=first,DC=domain,DC=com from a
different forest logged onto this machine. Cross Forest Group Policy
processing is disabled and loopback processing has been enforced in this
forest for this user account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Cheers,
PanTzeR

[PanTzeR]

Just forgot to mention that login script is set up in the user account
properties. User account is set up in Windows 2000 native domain, computer
account is in Windows 2003 domain. Trust between domains is external.
Computer I was testing it all on is running Windows XP. DC where script is -
is the only DC for the site and is logonserver for the client.

[Ziad K. Chafi]

http://aset.psu.edu/docs/windows/act...ow_to_gpo.html

This should solve your problem, but for next time please use a more Group
Policy related group:
http://www.microsoft.com/technet/com...&lang=en&cr=US

Have a nice day
--
Ziad K. Chafi
MCT, MCTS, MCDBA, MCSE: S, MCDST
CompTIA A+, CompTIA N+,


"PanTzeR" wrote:

> Just forgot to mention that login script is set up in the user account
> properties. User account is set up in Windows 2000 native domain, computer
> account is in Windows 2003 domain. Trust between domains is external.
> Computer I was testing it all on is running Windows XP. DC where script is -
> is the only DC for the site and is logonserver for the client.

[PanTzeR]

Thank you for your reply. I read document on the link you provided few times
and cannot see how that can solve the problem I am having.

As for the Group Policy related group, I might try it next time, but
question is in relation to the login script which is set in Active Directory
account properties and not through GPO.


"Ziad K. Chafi" wrote:

> http://aset.psu.edu/docs/windows/act...ow_to_gpo.html
>
> This should solve your problem, but for next time please use a more Group
> Policy related group:
> http://www.microsoft.com/technet/com...&lang=en&cr=US
>
> Have a nice day
> --
> Ziad K. Chafi
> MCT, MCTS, MCDBA, MCSE: S, MCDST
> CompTIA A+, CompTIA N+,
>
>
> "PanTzeR" wrote:
>
> > Just forgot to mention that login script is set up in the user account
> > properties. User account is set up in Windows 2000 native domain, computer
> > account is in Windows 2003 domain. Trust between domains is external.
> > Computer I was testing it all on is running Windows XP. DC where script is -
> > is the only DC for the site and is logonserver for the client.